Fix XSS vulnerability in conversations#new, #4010